iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in unicode buffer overflow in `CIccTagTextDescription`. Version 2.3.1.2 contains a patch. No known workarounds are available.
References
Configurations
History
12 Jan 2026, 18:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/InternationalColorConsortium/iccDEV/commit/7c2cb719a9de1c00844e457e070d657314383ee3 - Patch | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/commit/e91fe722ac54ce497d410153e7405090e0565d7b - Patch | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/issues/396 - Issue Tracking, Exploit, Vendor Advisory | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4pv4-4x2x-6j88 - Patch, Vendor Advisory | |
| First Time |
Color
Color iccdev |
|
| CPE | cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:* |
06 Jan 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-06 19:16
Updated : 2026-01-12 18:29
NVD link : CVE-2026-21491
Mitre link : CVE-2026-21491
CVE.ORG link : CVE-2026-21491
JSON object : View
Products Affected
color
- iccdev